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(57)Abstract: 

PROBLEM TO BE SOLVED: To easily execute necessary setting by setting 
an operation policy stored in a data base to be the description of a job 
content executed in a unit constituting a network and converting the 
description of the job content into control information on the unit 
constituting the network based on an appropriate processing. 
SOLUTION: An operation policy stored in a data base is the description of a ^ 
job content executed in a unit constituting a network and the description of 
the job content is converted into control information on the unit 
constituting the network based on an appropriate processing. A company 
network which is formed of two offices and accounting section/ industry 
section managing the two offices and which uses TCP/IP technology is 
assumed for the network 5 of a management object. Center policy DB1 
stores the operation policy of the network 5 and is constructed on a 
general computer. A management controller 3 supports the transmission of 
data between center policy DB1 and the unit constituting the network 5 in 
the middle of them. 
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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] The network management system which the employment policy memorized by this 
database is description of the work breakdown performed by the device which constitutes this 
network, and is characterized by being changed into the control information of the device which 
constitutes a network based on processing with an appropriate description of this work 
breakdown in the network management system which consists of a database which memorizes 
the employment policy of the network which consists of a router, a computer, etc., and this 
network. 

[Claim 2] The network management system characterized by having supervisory control 
equipment which supports both communication of information to the publication of a claim 1 in 
the middle of the device which constitutes this database and this network in a network 
management system. 

[Claim 3] The network management system characterized by having the duplicate database of 
this database in the publication of a claim 1 in a network management system. 
[Claim 4] The network management system characterized by being the business which the user 
group for whom description of this work breakdown uses a ** network takes charge of in a 
network management system a claim 1 or given [ any 1 ] in three. 

[Claim 5] The network management system characterized by being description about the 
application program performed on the computer by which description of this work breakdown was 
connected to the ** network in a network management system a claim 1 or given [ any 1 ] in 
three. 

[Claim 6] The network management system with which description about this user group's 
business in its duty is characterized by including the information about this user program that 
carries out user group use, and the information about the user group with whom this user 
program communicates in a network management system according to claim 4. 
[Claim 7] The network management system characterized by the description about this 
application program including the information about the communications protocol which this 
application program uses, and the information about a communication place in a network 
management system according to claim 5. 

[Translation done.] 
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* NOTICES * 

Japan Patent Office is not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] The example of composition of the network by this invention. 

[Drawing 2] Example of a content of the central policy DB1 (Zone definition) . 

[Drawing 3] Example of a content of the central policy DB1 (AP definition) . 

[Drawing 4] The example of a content display of the central policy DB1 corresponding to the 

definition illustrated by drawing 2. 

[Drawing 5] The example of a content display of the central policy DB1 corresponding to the 
definition illustrated by drawing 3. 

[Drawing 6] The example of the content display classified by application of the central policy 
DB1. 

[Drawing 7] The example of a definition of supplementary information. 
[ Drawing 8 ] The generated example of configuration information. 

[Drawing 9] The example of the content of storage of supervisory control equipment 3. 
[Drawing 1 0] The example of a data communication protocol. 

[Drawing 11] The example of data flow of a configuration information generate time. 
[Drawing 12] The example of an algorithm for configuration information generation. 
[Drawing 13] The central policy DB1 t duplicate DB2, and the example of composition of 
supervisory control equipment 3. 
[Description of Notations] 

1 [ — Supervisory control equipment, 4 / — Administrative I/O device, ] — The central policy 
DB, 2 — Duplicate DB, 3 5 [ — The content of storage of the central policy DB, ] — Intranet, 6 
— The Internet, 11, 12, 13, 14, 15, 16, 17 100 — The example of the router definition inside 
central policy DB, 101 — The example of the VPN definition inside central policy DB, 111 — The 
Internet Zone definition inside central policy DB, 121 — The FireWall Zone definition inside 
central policy DB, 131 [ Zone definition, ] — The A place-of-business Zone definition inside 
central policy DB, 141 — B place of business inside central policy DB 151 — The accounting 
Zone definition inside central policy DB, 161 — The labor Zone definition inside central policy 
DB, the application inside 171 — central policy DB — the definition of AP1, and the example of 
the data for router control inside 300 — supervisory control equipment — 301 — The example 
of the data for VPN control inside supervisory control equipment, 302 — The example of a 
router setup inside supervisory control equipment, 303 — The example of a VPN setup inside 
supervisory control equipment, 52 — Fire wall, 531,541,537 [ — The computer of the B place of 
business Zone, 535,545 / — The computer of Accounting Zone, 536,546 / — Computer of Labor 
Zone. ] — A router, 532, 533, 535,538,539,536 — The computer of the A place of business Zone, 
542,543,545,546 



[Translation done.] 
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